No hidden hours. No surprise invoices.
Two ways to work with us. Fix what's broken when it breaks, or hand the whole thing over and stop thinking about it.
Pay-as-you-go
Hourly support for businesses with some in-house capability, or a project that needs finishing.
Unlimited managed partnership
One predictable invoice. Everything monitored, patched, backed up, answered, and documented — including the security work hourly clients only call about after an incident.
Managed packages
Every package is per user, monthly, with a 12-month term that we'll always show you in writing before you sign.
Foundation
For small teams that mostly need things to work — and stay patched.
Partnership
Our most common partnership. Everything managed, onsite hours included.
Assurance
For practices with auditors, regulators, or a board asking hard questions.
Prices shown are typical for 10–25 users. Final scope depends on your assessment.
Regulated work, priced on its own.
Assessments, audits, and remediation are scoped separately from per-user support — the work is different, and a real starting number beats a "custom" placeholder.
HIPAA Security Risk Analysis
Medical and dental practices. Written risk analysis, remediation plan, policy set, and BAA register — the documentation an OCR investigator asks for first.
FTC Safeguards Program (GLBA)
Accountants, bookkeepers, lenders, and dealers. Written information security program, designated Qualified Individual, and annual review.
CMMC Level 1 Readiness
Defense subcontractors handling federal contract information. Control implementation, documentation, self-assessment, and SPRS posting.
CMMC Level 2 Readiness
NIST SP 800-171 gap analysis, SSP, POA&M, CUI enclave design, and preparation for the C3PAO assessment.
AI Governance Program
Written AI use policy, approved tool list with enterprise settings, vendor data-retention review, and signed staff attestation records.
Compliance as a service
Ongoing annual reviews, evidence upkeep, vendor security questionnaires, and audit support for any framework above.
CMMC certification assessments are paid directly to the C3PAO and are not included in readiness pricing. Every engagement starts with a free scoping call.
Scope my compliance work